$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5/e2cafb19-a3db-3678-b74d-774cef677433.roa File: e2cafb19-a3db-3678-b74d-774cef677433.roa (raw, json) Hash identifier: xtDCVpVw4FBWoEH+Lk9ZDuWuTKzYGf1oyzO+3yN0SYI= Subject key identifier: 19:0A:36:57:1D:5D:3C:F2:7F:2C:18:4D:91:A6:51:24:21:91:15:52 Certificate issuer: /CN=7ed4b7da-afac-4a5d-b987-9835dbc0c0a5 Certificate serial: 010D0C9F4328584F23C25911964DE1A4CCADEC70 Authority key identifier: 5F:9C:25:D0:61:90:7F:1A:CA:4B:A9:D2:7C:77:B4:E6:99:F4:8A:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5/e2cafb19-a3db-3678-b74d-774cef677433.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 2675 IP address blocks: 142.236.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:59:11:96:4d:e1:a4:cc:ad:ec:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ed4b7da-afac-4a5d-b987-9835dbc0c0a5 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=4bd4c62b-5790-49ce-b865-24864cf9d27e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e7:fa:a8:40:a3:e4:18:63:90:56:c3:01:53: b1:a4:ae:20:03:c3:96:15:37:86:7d:60:7e:71:8d: ca:9e:15:97:c0:4c:87:48:83:0e:88:e0:ab:d1:d6: 49:5d:90:46:29:7e:fd:e0:75:7c:f0:0a:ba:45:fc: 16:e4:10:e8:eb:fa:be:4a:b4:74:d3:35:a4:16:14: 30:58:62:2e:2d:0d:b3:67:74:e9:f3:9b:3b:1b:17: f6:95:3b:ac:21:93:7d:43:6c:3a:31:99:a1:3f:27: f5:fd:39:f2:7b:7d:f6:c7:83:82:a5:43:71:fe:de: ca:4a:ae:fb:11:63:f4:a4:a0:18:10:62:ba:14:14: 65:3b:b7:96:5d:ad:93:3b:07:44:a9:41:a4:ff:80: ed:d4:1a:2a:6e:e2:b3:49:d9:9e:c2:7f:bf:a3:36: 40:3a:2c:e8:ed:e1:8d:0e:4f:20:9e:57:41:18:92: ee:14:9e:e3:7f:7b:74:6f:0d:c5:26:00:48:fb:3c: ef:93:44:d8:6a:2d:79:af:8b:20:80:be:1c:c4:02: 2e:5f:fb:36:8d:51:29:5e:51:14:53:98:54:2b:f5: 5a:c9:81:2b:fe:77:72:ba:a0:d4:f6:57:04:19:f3: 28:98:2f:72:41:a4:fd:49:05:fd:72:33:35:44:85: 98:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0A:36:57:1D:5D:3C:F2:7F:2C:18:4D:91:A6:51:24:21:91:15:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5/e2cafb19-a3db-3678-b74d-774cef677433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5.crl X509v3 Authority Key Identifier: keyid:5F:9C:25:D0:61:90:7F:1A:CA:4B:A9:D2:7C:77:B4:E6:99:F4:8A:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5.cer sbgp-ipAddrBlock: critical IPv4: 142.236.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:73:d2:b9:86:39:20:e7:4d:bb:01:7d:6c:59:ba:60:51:29: f3:7c:7b:ba:5d:b0:51:05:8e:fc:74:23:ed:c3:81:90:22:41: ba:29:d9:16:74:b6:92:42:28:c2:bd:34:ef:b1:17:8b:58:2b: b1:9f:7e:de:a5:6f:24:15:7d:80:a8:11:54:13:b6:0e:fa:c8: 68:8c:38:e5:a3:77:93:00:69:13:de:6b:b6:dd:77:3b:6d:b8: fa:7c:5f:8d:7c:a7:ec:58:77:26:9c:a7:a0:9e:b5:05:3e:cb: 13:db:84:a4:53:18:d6:c4:5c:f6:86:ca:20:df:a0:73:5e:c0: 13:16:16:73:53:35:1a:a2:32:37:cf:74:d3:a8:62:7b:eb:e2: 91:b1:ca:30:5f:94:ed:35:9b:93:e3:6b:22:69:66:a4:44:ee: 23:9f:72:71:c1:58:dc:36:76:3f:54:27:09:f8:00:d6:98:8c: fa:02:32:7f:09:ce:9c:49:ac:28:38:37:6e:5b:e7:4d:7e:43: 50:9b:12:4f:c3:ff:dd:29:da:c5:83:47:02:3c:b8:0e:40:29: 15:4d:ec:04:03:7a:f9:3a:39:45:90:cd:78:46:0c:06:f9:68: ca:26:db:de:5a:66:5b:6b:25:f1:39:69:8e:a2:2b:ed:b3:1a: ce:c5:67:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwlkRlk3hpMyt7HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VkNGI3ZGEtYWZhYy00YTVkLWI5ODctOTgzNWRiYzBj MGE1MB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk NGJkNGM2MmItNTc5MC00OWNlLWI4NjUtMjQ4NjRjZjlkMjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOf6qECj5BhjkFbDAVOxpK4gA8OWFTeGfWB+ cY3KnhWXwEyHSIMOiOCr0dZJXZBGKX794HV88Aq6RfwW5BDo6/q+SrR00zWkFhQw WGIuLQ2zZ3Tp85s7Gxf2lTusIZN9Q2w6MZmhPyf1/Tnye332x4OCpUNx/t7KSq77 EWP0pKAYEGK6FBRlO7eWXa2TOwdEqUGk/4Dt1BoqbuKzSdmewn+/ozZAOizo7eGN Dk8gnldBGJLuFJ7jf3t0bw3FJgBI+zzvk0TYai15r4sggL4cxAIuX/s2jVEpXlEU U5hUK/VayYEr/ndyuqDU9lcEGfMomC9yQaT9SQX9cjM1RIWYyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkKNlcdXTzyfywYTZGmUSQhkRVSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83ZWQ0 YjdkYS1hZmFjLTRhNWQtYjk4Ny05ODM1ZGJjMGMwYTUvZTJjYWZiMTktYTNkYi0z Njc4LWI3NGQtNzc0Y2VmNjc3NDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvN2VkNGI3ZGEtYWZhYy00YTVkLWI5 ODctOTgzNWRiYzBjMGE1LzdlZDRiN2RhLWFmYWMtNGE1ZC1iOTg3LTk4MzVkYmMw YzBhNS5jcmwwHwYDVR0jBBgwFoAUX5wl0GGQfxrKS6nSfHe05pn0iiIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy83ZWQ0YjdkYS1hZmFjLTRhNWQtYjk4Ny05ODM1 ZGJjMGMwYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjuxOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdz0rmGOSDnTbsBfWxZumBRKfN8e7pdsFEFjvx0I+3DgZAiQbop2RZ0 tpJCKMK9NO+xF4tYK7Gfft6lbyQVfYCoEVQTtg76yGiMOOWjd5MAaRPea7bddztt uPp8X418p+xYdyacp6CetQU+yxPbhKRTGNbEXPaGyiDfoHNewBMWFnNTNRqiMjfP dNOoYnvr4pGxyjBflO01m5PjayJpZqRE7iOfcnHBWNw2dj9UJwn4ANaYjPoCMn8J zpxJrCg4N25b501+Q1CbEk/D/90p2sWDRwI8uA5AKRVN7AQDevk6OUWQzXhGDAb5 aMom295aZltrJfE5aY6iK+2zGs7FZ8s= -----END CERTIFICATE-----Generated at Mon Sep 28 16:48:57 2026 by rpki-client